4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
Size

98KB
MD5

5396f55b458ba073ae3e2280dc6a4230
SHA1

8b85aaed85ac7de74830f0895af4ccde1e23a39f
SHA256

4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29
SHA512

2c17824be7e23d367565789ceef9c877479382c23de42dc7d24e4859f9a7c345dd6fff3a01d463aeb75b17f232ca5aba43ef93e1e93e11eafd5a89b33d089e15
SSDEEP

3072:9QWpze+eO888888888888888888888888888888888888888888888888888888y:Lpe+ekeq1c

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3431) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\es-ES\jnwdui.dll.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bogota.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tokyo.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\jnwppr.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\css\settings.css.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\flyout_background.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\PresentationFramework.resources.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Defender\MpCmdRun.exe.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\F12Tools.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\js\weather.js.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\SecretST.TTF.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmid.exe.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\alertIcon.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqloledb.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\cmm\PYCC.pf.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\AccessibleHandler.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\settings.html.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Hearts\ja-JP\Hearts.exe.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Mail\es-ES\WinMail.exe.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows NT\Accessories\WordpadFilter.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\it-IT\Journal.exe.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseover.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\kab.txt.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png.tmp	4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4c3d905474efd3b04793ef21c9fdc1add152d6ca59cee41f16afbdf073830a29_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp

Filesize
98KB

MD5
510a6630482099c6d936f42187d0000a

SHA1
532210914a4f5ad4b421616c99de6c151336c647

SHA256
bcad011a6f4d69f00a208ccbd89655a402edd6f0e2bbdbe21ef693b29b5494c4

SHA512
72762ca98da79a3f6818eb1ac7ecee5b9e1daf30546a5fb1ebe680dc04c013b2f566492c793cf4ec8a3ff32a45b8a177f0b314a501e1696e0058b10765514eff

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
107KB

MD5
212dc697625d97b1d9b1a0073efaa6e8

SHA1
5145908daeb0885bd5eee9dc3d40d609983adea1

SHA256
d34a411b7590b17f925e75c44dbc0297986890f2171ae874ee8326a1b8ab7985

SHA512
fddc4ebfac8b7ee2935fc562c8b7076197bcfba7d9837e25d89b6e5cb9f8beaead6b3de694f0c7d21a173714cbb0e70ecc938aefd72336ce21d032a86556581e

Download Submit
memory/1704-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1704-640-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads